Privacy Policy

1. Introduction

Welcome to LOST (Last One Standing Tournament), a real-world augmented reality mobile elimination game operated by Veygos Productions LLC (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the LOST mobile application (the “App”) and related services.

By downloading, installing, or using LOST, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

2. Eligibility and Age Requirements

LOST offers two modes of play:

• Paid Tournament Mode: Available only to users aged 18 or older. Requires identity verification through Stripe Identity before participating in cash-prize tournaments.
• Free, Points-Only Mode: Available to users aged 13 or older. No identity verification or payment information is required.

We do not knowingly collect personal information from children under the age of 13. If we discover that a user is under 13, we will promptly delete their account and associated data. If you believe a child under 13 has provided us with personal information, please contact us immediately at the address listed in Section 13.

3. Information We Collect

3.1 Account Information

When you create a LOST account, we collect:

• Email address
• Username (chosen by you)
• Date of birth (to verify age eligibility)

3.2 Location Data

LOST is a GPS-based game that requires precise location data to function. We collect and use your location in the following ways:

• Real-Time GPS Data: Your device’s GPS coordinates are used in real time during active gameplay to determine proximity to your assigned target and to enforce geographic restrictions (such as safe zones and state-based tournament eligibility).
• Stored Location Data: We store certain GPS-derived data on our servers for the purposes of statistical skill analysis (to demonstrate that LOST outcomes are predominantly skill-determined), anti-cheat enforcement, and to maintain your designated home safe zone. Raw GPS coordinates from gameplay sessions are retained in aggregated or anonymized form and are not linked to your real-time movements outside of active gameplay.
• Geofencing: We use GPS geofencing to determine your state of residence for tournament eligibility. Paid tournaments are currently available only in the State of Utah. Users in all other states may access free, points-only mode.

3.3 AR Camera Data

LOST uses your device’s camera through an augmented reality interface to confirm eliminations during gameplay. The AR camera is used strictly for visual confirmation and does not perform facial recognition, biometric scanning, or any form of biometric data collection. Camera data is processed locally on your device and is not transmitted to or stored on our servers.

3.4 Payment and Identity Verification Data

If you participate in paid tournaments, payment processing and identity verification are handled entirely by Stripe, Inc., our third-party payment processor. We do not collect, store, or have access to:

• Credit or debit card numbers
• Bank account information
• Government-issued identification documents (submitted via Stripe Identity)
• Social Security Numbers or Tax Identification Numbers (collected by Stripe for tax reporting)

Stripe may share limited verification results with us (such as whether your identity was successfully verified and your legal name for tax reporting at the $600 cumulative threshold), but we never receive or store the underlying documents or full financial account details. Stripe’s handling of your data is governed by Stripe’s own Privacy Policy, available at stripe.com/privacy.

3.5 Gameplay and Telemetry Data

We collect data related to your gameplay activity, including:

• Elimination records (who you eliminated and when)
• Win/loss history and tournament results
• Movement patterns during gameplay (aggregated for skill analysis)
• Tournament participation history
• Points and prize earnings

This data is used for skill analysis, leaderboard rankings, anti-cheat detection, and to improve the game experience.

3.6 Device and Technical Data

We automatically collect certain technical information from your device, including:

• Device type, model, and operating system version
• Unique device identifiers
• App version
• Jailbreak/root detection status (for anti-cheat purposes)
• IP address
• General crash and performance data

3.7 Advertising Identifiers

In the free, points-only mode of the App, our advertising provider (Google AdMob) may access your device’s Advertising Identifier (Apple’s Identifier for Advertisers, or “IDFA”) for purposes of ad delivery, frequency capping, and ad performance measurement. On iOS, access to the IDFA requires your explicit permission through Apple’s App Tracking Transparency (ATT) framework. If you decline ATT permission, ads will still be served but will not use the IDFA for personalization.

3.8 Crash and Diagnostic Data

We collect crash diagnostic data, including stack traces, device state at the time of crash, operating system version, and app version, through Firebase Crashlytics (a service provided by Google LLC). This information is used to monitor app stability and diagnose technical issues. Crash data is transmitted using anonymous installation identifiers and is not linked to your account, email address, or other identifying account information.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Gameplay Operations: To enable real-time GPS-based gameplay, target assignment, elimination confirmation, safe zone enforcement, and tournament management.
• Skill Analysis: To conduct statistical analysis demonstrating that LOST outcomes are predominantly determined by player skill, as required for legal compliance with state gaming laws.
• Anti-Cheat Enforcement: To detect and prevent GPS spoofing, jailbroken/rooted device use, collusion, multi-accounting, and other forms of cheating.
• Tournament Eligibility: To verify your age, identity (for paid mode), and geographic location for state-based tournament access.
• Tax Reporting: To comply with IRS reporting requirements. We issue 1099-MISC forms for users who receive $600 or more in cumulative prize earnings in a calendar year, using information provided through Stripe.
• Communications: To send push notifications related to gameplay events (target assignments, eliminations, tournament updates, and account alerts).
• Advertising: To serve ads in the free, points-only mode of the App through Google AdMob.
• Stability and Diagnostics: To monitor app stability, diagnose crashes, and improve performance through Firebase Crashlytics.
• Improvements: To analyze usage trends, fix bugs, and improve the App’s features and performance.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

5. Third-Party Services

We use the following third-party service providers to operate LOST. Each provider has its own privacy policy governing its handling of your data:

We do not sell your personal information to any third party. We share data with the providers listed above only as necessary to operate the App and its features.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide services. Specific retention practices include:

• Account Data: Retained for the life of your account. Deleted upon account deletion request, subject to the exceptions below.
• Gameplay and Telemetry Data: Retained for the life of your account for leaderboard, skill analysis, and anti-cheat purposes. Aggregated or anonymized data may be retained indefinitely for statistical analysis after account deletion.
• GPS Data: Real-time GPS data is ephemeral and not stored beyond the active gameplay session. Aggregated location-derived data (movement patterns, safe zone designation) is retained as described above.
• Tax Records: As required by law, tax-related records (1099-MISC filings, payout amounts, and associated legal names) are retained for a minimum of seven (7) years following the applicable tax year, even after account deletion.
• Anti-Cheat Records: Records of account suspensions or bans may be retained indefinitely to prevent re-registration by banned users.
• Crash Diagnostics: Crash reports transmitted to Firebase Crashlytics are retained according to Google’s data retention policies and are not linked to identifiable account data.

7. Account Deletion

You may request deletion of your account at any time through the App’s settings or by contacting us at the address in Section 13. Upon receiving a verified deletion request, we will:

• Delete your account profile, email, username, and associated gameplay data within thirty (30) days.
• Retain tax-related records for the legally required retention period (see Section 6).
• Retain anti-cheat enforcement records (suspension/ban history) as necessary to maintain platform integrity.
• Remove your home safe zone designation.
• Instruct Stripe to delete your identity verification and payment data in accordance with Stripe’s data retention policies.

Aggregated or de-identified data that cannot reasonably be used to identify you may be retained for analytical purposes.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure server infrastructure, and access controls limiting employee access to personal data.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

9. State Privacy Rights

9.1 Utah Consumer Privacy Act (UCPA)

If you are a Utah resident, you have the following rights under the Utah Consumer Privacy Act:

• The right to confirm whether we are processing your personal data.
• The right to access your personal data.
• The right to delete personal data you have provided to us.
• The right to obtain a copy of your personal data in a portable format.
• The right to opt out of the processing of your personal data for targeted advertising or the sale of personal data (note: we do not sell personal data).

9.2 California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA/CPRA.

To exercise any state privacy right, please contact us using the information in Section 13. We will respond within the timeframe required by applicable law.

10. Advertising, Tracking Transparency, and Opt-Out

The free, points-only mode of LOST is supported by advertisements served through Google AdMob. AdMob may collect device identifiers, IP address, coarse (city- or region-level) location data, and ad interaction data to serve ads and measure ad performance.

App Tracking Transparency (ATT). Before any advertising that relies on Apple’s Advertising Identifier (IDFA) is delivered, the App will present Apple’s App Tracking Transparency permission prompt. If you decline this prompt, advertisements will still be served, but will not use your IDFA and will not be personalized using cross-app activity.

Opt-Out Controls.

• iOS App Tracking Transparency: Settings → Privacy & Security → Tracking → disable “Allow Apps to Request to Track.”
• Limit Ad Personalization (iOS): Settings → Privacy & Security → Apple Advertising → disable “Personalized Ads.”
• AdMob in-app controls: Where supported, you may also adjust personalized ad preferences from within the App.

For more information about AdMob’s data practices, visit Google’s Privacy & Terms page at policies.google.com/privacy. Paid tournament mode does not display advertisements.

11. Push Notifications and Diagnostic Data Controls

We use push notifications to communicate gameplay events such as target assignments, elimination alerts, tournament start times, and account-related updates. You may disable push notifications at any time through your device’s settings. Disabling push notifications may affect your gameplay experience, as you will not receive real-time alerts about tournament activity.

We do not send marketing emails or SMS messages.

Crash diagnostic data. Crash reporting via Firebase Crashlytics is enabled by default during the App’s beta period to support stability monitoring. Crash data is transmitted using anonymous installation identifiers and is not associated with your account. We may add an in-app control to disable crash reporting in a future release.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App (via push notification or in-app notice) prior to the changes taking effect. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically. A summary of revisions is maintained in Section 14.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a concern, please contact us at:

14. Revision History